https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:30:57.902063+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-26662 CVE-2022-26662 2026-10-04T09:30:57.903794+00:00

An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server.

 https://cve.radiocsirt.org/vuln/ghsa-pm3h-mm62-pwm8 GHSA-pm3h-mm62-pwm8 — XML Entity Expansion in trytond and proteus 2026-10-04T09:30:57.903841+00:00

Affected: PyPI: trytond, PyPI: proteus

An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server.